$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/895f24ca-03cd-315d-857e-42a4f594e647.roa File: 895f24ca-03cd-315d-857e-42a4f594e647.roa (raw, json) Hash identifier: YgccIcfdP5vfRTm3SKTKZVtNts+8ijyxtsczcxq6NRk= Subject key identifier: E8:54:7D:33:64:57:EF:50:BD:DF:FF:A2:DE:C6:77:98:12:4A:3B:48 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BE906D2292BC4ABC6B100 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/895f24ca-03cd-315d-857e-42a4f594e647.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.133.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:e9:06:d2:29:2b:c4:ab:c6:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=64f9efa0-7259-446e-b5d6-dc0d54394b8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f3:9a:cf:3e:cc:77:1c:39:ca:d0:78:94:29: e8:ba:22:c4:85:61:03:7d:5c:60:e4:25:51:58:57: 2f:a0:6b:74:ad:19:9a:c3:35:50:b2:5a:2e:8e:af: dd:0d:22:d5:66:a0:20:83:59:38:3d:e5:17:a2:33: 59:3d:be:3f:2b:56:8c:63:8b:98:a0:bf:6f:dd:03: 11:02:2a:05:6b:39:bf:e9:57:39:68:7a:4b:c6:c9: 02:87:b6:79:48:f1:f1:15:fe:77:2a:ef:c7:8f:34: b1:1a:18:1c:e7:e4:5b:5f:fd:98:33:df:26:04:10: bc:12:51:27:33:ba:91:aa:93:1b:12:60:f0:97:d2: 50:b1:2a:eb:d7:b0:72:43:ce:03:7f:fa:61:a6:53: e5:94:11:97:11:7f:d6:72:bf:f2:d5:41:49:fb:f6: e0:e7:60:de:b7:3e:bb:4c:1f:89:f6:ee:f4:a0:ef: 84:36:51:be:73:e9:18:0f:b8:9c:f4:0e:9d:90:54: 6a:7a:15:2c:fc:18:6f:ac:3e:d4:f6:39:49:b6:a4: 12:a7:c2:28:65:b6:81:a8:40:3e:00:41:fe:79:8a: 55:09:1d:9b:9e:a1:b3:b5:39:ff:e6:86:ae:50:19: df:2a:f3:88:d5:c8:5c:67:07:c5:4d:61:67:9c:8d: 69:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:54:7D:33:64:57:EF:50:BD:DF:FF:A2:DE:C6:77:98:12:4A:3B:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/895f24ca-03cd-315d-857e-42a4f594e647.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.133.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:23:3d:51:53:1e:be:4a:57:1b:d7:43:0f:01:8c:91:ad:8d: b7:22:13:42:09:61:69:c5:14:ba:b6:39:0a:34:cf:05:2b:4e: 7d:b7:02:bc:2f:ad:f2:fd:67:c8:a7:52:2b:47:bb:06:04:34: e5:71:47:46:d2:c4:92:4d:70:fd:b9:f5:63:ba:d7:23:43:96: ba:b1:a3:db:44:96:02:fa:5d:4d:e4:52:9f:a8:4b:9e:93:31: cc:76:b0:ec:5a:13:d0:06:a9:ab:ac:9e:5e:16:cb:e4:64:91: ed:24:d8:2d:51:12:01:79:be:dc:d8:33:b5:56:75:5c:91:0b: 30:1a:d9:91:5c:5c:90:75:7b:c6:20:ac:15:88:67:56:c6:67: 25:6e:74:a7:3d:9c:fe:f3:0d:75:2d:f9:d7:fa:37:be:ef:b6: 7a:24:a6:f9:bc:c5:0c:ea:b4:d5:b3:8e:5f:54:c8:0c:a1:2d: 05:dc:71:dd:de:9b:84:d6:b0:9c:75:68:fe:6d:62:59:73:4d: 0f:b0:78:a6:5b:6d:52:02:7f:6c:4f:db:af:c1:4c:89:47:6a: f4:80:f2:5b:3e:1e:2b:1d:d5:d7:d9:79:28:ef:bb:e0:50:73: 84:4c:41:9d:69:07:32:8c:ff:4c:fb:bf:6b:fd:4b:5b:d0:ff: 7d:85:8c:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS+kG0ikrxKvGsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NjRmOWVmYTAtNzI1OS00NDZlLWI1ZDYtZGMwZDU0Mzk0YjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvOazz7Mdxw5ytB4lCnouiLEhWEDfVxg5CVR WFcvoGt0rRmawzVQsloujq/dDSLVZqAgg1k4PeUXojNZPb4/K1aMY4uYoL9v3QMR AioFazm/6Vc5aHpLxskCh7Z5SPHxFf53Ku/HjzSxGhgc5+RbX/2YM98mBBC8ElEn M7qRqpMbEmDwl9JQsSrr17ByQ84Df/phplPllBGXEX/Wcr/y1UFJ+/bg52Detz67 TB+J9u70oO+ENlG+c+kYD7ic9A6dkFRqehUs/BhvrD7U9jlJtqQSp8IoZbaBqEA+ AEH+eYpVCR2bnqGztTn/5oauUBnfKvOI1chcZwfFTWFnnI1pSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOhUfTNkV+9Qvd//ot7Gd5gSSjtIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODk1ZjI0Y2EtMDNjZC0z MTVkLTg1N2UtNDJhNGY1OTRlNjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUjPVFTHr5KVxvXQw8BjJGtjbciE0IJYWnFFLq2OQo0zwUrTn23Arwv rfL9Z8inUitHuwYENOVxR0bSxJJNcP259WO61yNDlrqxo9tElgL6XU3kUp+oS56T Mcx2sOxaE9AGqausnl4Wy+Rkke0k2C1REgF5vtzYM7VWdVyRCzAa2ZFcXJB1e8Yg rBWIZ1bGZyVudKc9nP7zDXUt+df6N77vtnokpvm8xQzqtNWzjl9UyAyhLQXccd3e m4TWsJx1aP5tYllzTQ+weKZbbVICf2xP26/BTIlHavSA8ls+Hisd1dfZeSjvu+BQ c4RMQZ1pBzKM/0z7v2v9S1vQ/32FjDE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:08:02 2025 by rpki-client